Back to article
secwest.net

BadHost: One Char Bypasses Host-Based Security Across the Python AI Stack (opens in new tab)

Covers CVE-2026-48710 Starlette Host-Header Auth BypassCovered by 6 sources See all sources covering this story including DEV Community, infoworld.comDiscussed on Hacker News

Covers 1 related story

badhost.org·

CVE-2026-48710 Starlette Host-Header Auth Bypass

Discussed on Lobsters
Feeds

Covered in 6 articles

DEV Community·

CVE-2026-48710: CVE-2026-48710: Starlette BadHost HTTP Host-Header Path-Poisoning and Authentication Bypass

Discussed on DEV
Feeds
infoworld.com·

FastAPI-based AI tools exposed to authentication bypass by flaw in Starlette framework

Feeds
InfoQ·

BadHost Vulnerability Exposes AI Agents, Evaluators, and LLM Gateways

Feeds
csoonline.com·

FastAPI-based AI tools exposed to authentication bypass by flaw in Starlette framework

Feeds
ostif.org·

Disclosing the BADHOST Vulnerability in Starlette

Discussed on Hacker News
Feeds
Metacurity·

Centcom: US war zone troops were targeted through commercial location data

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help